# ICM

> ICM is a value-add cybersecurity distributor. It represents cybersecurity
> companies founded by Turkish entrepreneurs, and only those, and takes them
> into Türkiye and the Gulf through a reseller channel. Two entities, Istanbul
> and Dubai. The site is published in English, Turkish, Arabic and French at
> /en/, /tr/, /ar/ and /fr/; the English pages are listed below and every URL
> has an equivalent under the other three prefixes.

## What the company does

- [Home](https://www.icmconnect.com/en): what ICM is, how the model works, and the three audiences it serves
- [About](https://www.icmconnect.com/en/about): the argument, the mission, and who runs the company
- [Contact](https://www.icmconnect.com/en/contact): one email address, two offices, two phone numbers

## The portfolio

- [Portfolio](https://www.icmconnect.com/en/portfolio): every product under agreement, the rule that decides what enters, and the two cases where two products sit close together
- [Solutions](https://www.icmconnect.com/en/solutions): the same portfolio arranged by the problem a buyer arrived with rather than by product name

## For the channel

- [For vendors](https://www.icmconnect.com/en/partner/vendors): what a founder gets, what ICM looks for, and the alternative a founder is actually weighing
- [For partners](https://www.icmconnect.com/en/partner/partners): deal registration, the commitments ICM can be held to, and why margin survives
- [Register a deal](https://www.icmconnect.com/en/register-a-deal): what a registration holds, what it does not, and what to send

## Analysis

- [A feed is not intelligence. The question is who reads it.](https://www.icmconnect.com/en/insights/a-feed-is-not-intelligence): A global feed is raw material an analyst turns into a decision. Who is going to read it decides which of two very different products you need.
- [An alert with nothing left to judge](https://www.icmconnect.com/en/insights/an-alert-with-nothing-to-judge): Every other detection source produces a probability an analyst has to assess. What a source costs to triage matters as much as what it finds.
- [Every application moved into the browser. The management did not.](https://www.icmconnect.com/en/insights/browser-the-last-unmanaged-endpoint): Every business application opens in a browser, and company data now leaves through it into models nobody procured. Three routes are open, and two are migrations.
- [Residency is written about storage and tested on the key](https://www.icmconnect.com/en/insights/data-residency-key-custody): Residency rules are written about where data sits and enforced on who can produce the key. A tender asks the second question in the words of the first.
- [Deciding before you know](https://www.icmconnect.com/en/insights/deciding-before-you-know): An executable nobody has seen before is about to run. Every endpoint product is an answer to that one moment, and they differ in what they do without an answer.
- [The directory is the floor everything else stands on](https://www.icmconnect.com/en/insights/the-directory-is-the-floor): A directory drifts through ordinary administration, not through mistakes. That is why a point-in-time audit and continuous assessment are different products.
- [The half that gets cut](https://www.icmconnect.com/en/insights/the-half-that-gets-cut): Training a user to report creates a queue. Most programmes buy the training and never staff the queue, which teaches people that reporting achieves nothing.
- [Three questions, sold as one](https://www.icmconnect.com/en/insights/three-exposure-questions): Attack surface management, vulnerability management and control validation answer three different buying questions. Owning one does not remove the need for the other two.

## Notes

- No page on this site carries a statistic about a vendor, and no figure appears without a source named in the same paragraph.
- Product pages describe what the vendor's own documentation states. For binding detail, the vendor's documentation governs.
- Legal texts are at /en/legal/privacy and /en/legal/terms and are excluded from search indexes on purpose.